Subtraction makes computing integers faster 



We show some facts regarding the question whether, for any number 
n, the length of the shortest Addition Multiplications Chain (AMC) com- 
puting n is polynomial in the length of the shortest division-free Straight 
Line Program (SLP) that computes n. 

If the answer to this question is "yes", then we can show a stronger up- 
per bound for PosSLP, the important problem which essentially captures 
the notion of efficient computation over the reals. If the answer is "no", 
then this would demonstrate how subtraction helps generating integers 
super-polynomially faster, given that addition and multiplication can be 
done in unit time. 

In this paper, we show that, for almost all numbers, AMCs and SLPs 
need same asymptotic length for computation. However, for one specific 
form of numbers, SLPs are strictly more powerful than AMCs by at least 
one step of computation. 

1 Introduction 

1.1 Straight Line Programs and PosSLP 

Consider a sequence of registers (oto, Oi, . . . , ffl/) where oo = 1 and a/ = n. 
A division-free Straight Line Program (SLP) P is a sequence of assignments 
ji,ki)}i. Each assignment (*i,ji,ki) represents the operation <Zj 4— dj^iOka 
where *j G { + , — , x } and < ji, fcj < i. P can be viewed as an arithmetic circuit 
computing integer n, where 1 is the only given constant. 

The number which P computes or the result of P is denoted by c(P) = n. 
The length of P is I, and is denoted by \P\. We denote the length of the shortest 
SLP computing a number n by r(n). 

The original motivation of this paper is this problem. 

Definition 1. PosSLP is the following problem: Given a SLP P, does P 
compute a positive number ? 
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PosSLP was introduced by Allender et al. [T] to study the relationship 
between classical models of computation and computation over the reals in the 
Blum-Shub-Smale model |10| . 

In the Blum-Shub-Smale model, the inputs are elements of M R™ = R°° , 
and thus each machine accepts a "decision problem" L C M°°. The machine 
can do all arithmetic operations and <-test over R in unit time, and it has a 
finite set S of real machine constants. The set of decision problems accepted by 
polynomial-time machine over K using only constants from S U {0, 1} is called 
Pj|. The union of the classes over all S is called polynomial-time over K and 
is denoted Pr. The subclass Pg of "constant-free polynomial-time" is usually 
denoted by Pjj. 

In order to relate computation over R to the classical Boolean complexity 
classes such as P, NP, PSPACE, etc., we consider the Boolean part of decision 
problems over the reals L C R°°, which is defined as BP(L) = L n {0, 1}*. In 
other words, we consider only when the inputs are bit strings. The Boolean part 
of P K is naturally denoted by BP(P R ) = {BP(L) \ L e P R }. The relationship 
between BP(Pu) and classical classes has been shown: 

P/poly C BP(P K ) C PSPACE/poly. 

The lower bound is by Koiran [5] and the upper bound is by Cucker and 
Grigoriev [5]. In the "constant-free" case BP(Pg), it turns out that PosSLP 
precisely captures this class. In particular, Allender et al. [1J showed that 

pPosSLP = BP(PO). 

This means that, given an oracle for PosSLP, one can efficiently simulate the 
constant- fre^ll polynomial-time machines of the Blum-Shub-Smale model of real 
computation when the inputs are bit strings. 

This shows interesting consequence because the well-known Sum-of-square- 
roots problem, which has many applications to computational geometry, is in 
BP(Pg) [T2]. In this problem, we are given positive integers d\,...,d n and 
k, and we want to decide whether \fd~i < k. The Euclidean Traveling 

Salesman problem, even though it has PTAS, is not known to be in NP because 
there is no known technique for exactly verifying the length of a given path 
without using Sum-of-square-roots as a procedure. This problem, hence, is in 
NP relative to the Sum-of-square-roots problem. 

The above discussion suggests the non-trivial upper bounds for PosSLP is 

very interesting. The current best upper bound for PosSLP is between the 3 rd 

pppp 

and the A th level of the counting hierarchy. In particular, PosSLP € P pp [lj, 
which implies that the Sum-of-square-roots problem and the Euclidean Traveling 
Salesman Problem are also in the counting hierarchy. 

There is yet another reason to be interested in PosSLP. In [Tj, it was also 
shown that the generic task of numerical computation (GTNC) is polynomial 

1 Actually, we have even that p Pos SLP _ gp^pS^ w h ere <J contains only real algebraic 
constants, as Pjjj = Pp HI. 
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time Turing equivalent to PosSLP. Thus, given the PosSLP oracle, we gain 
numerical stability for any algorithms. 

1.2 Addition Multiplication Chains 

An Addition Multiplication Chain (AMC), introduced in [2], is an SLP without 
subtraction. That is, * € {+, x}. It can be viewed as a monotone arithmetic 
circuit computing integer. We denote the length of the shortest AMC computing 
a number n by r+(n). 

Now, we ask whether for every number n £ N, r + (n) = T(n)°^: is the 
length of the shortest AMC computing n always polynomial in the length of the 
shortest SLP ? If the answer to this question is "yes", we can show that PosSLP 
is in the 2 nd level of the polynomial hierarchy. Note that PH C P pp by Toda's 
theorem. So this is a much stronger upper bound. 

Claim 2. If r+(n) = r(n)°W, then PosSLP e ££. 

Proof. Given an SLP of size r(n), we guess the AMC of size at most r(n)°^ 1 \ 
and then verify the equivalence of the given SLP and the guessed AMC. 

If the SLP computes a positive number, we can guess a correct AMC, as 
r + (n) = T(n)°^ by assumption. If not, then no such AMC exists because 
AMCs can compute only positive numbers. 

To verify the equivalence, it is known that EquSLP, deciding if two SLPs 
compute the same number, is in coRP. So PosSLP G 3coRP C 3coNP = S p • □ 

On the other hand, it is also interesting to prove that the answer is "no": to 
show that there exists some number n for which r+(n) ^ rin) ^. This would 
demonstrate how subtraction helps generate integers super-polynomially faster, 
given that addition and multiplication can be done in unit time. 

1.3 Our Results 

In this paper, we show two facts regarding the question, r + (n) = r(n) ' 1 '. 

• First, for almost all numbers n, SLPs and AMCs need the same asymptotic 
length for computing n. 

• Second, for one specific form of numbers, SLPs are indeed strictly more 
powerful than AMCs by at least one step of computation. The hard in- 
stance we use to establish the lower bound for AMCs is 2 2 " — 1, where 
tieN. 

1.4 Polynomial Version of the Problem 

The question r + (n) = T(n)°^ can be rephrased as "do monotone arithmetic 
circuits computing integer n have significantly less power than usual ones?". 

In polynomial setting, where we are given variables x%, . . . , x n and any field 
constants and we want to compute some polynomial p(x\, ■ ■ ■ , x„), this question 
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is well-studied. There are polynomials that required exponential size monotone 
arithmetic circuits, but can be computed by polynomial size usual arithmetic 
circuits. 

For instance, Valiant [TB] showed that such a hard instance is the perfect 
matching polynomial of the triangle grid graph. One fact used to establish the 
lower bound for monotone circuits is that every computed monomial can never 
be canceled. To show the upper bound for usual circuits, the fact that perfect 
matching polynomial is homogeneous is used; if we know that p(x\, . . . , x n ) is 
a d-degree homogeneous component of another easy polynomial q(x±, . . . ,x n ) 
that can be computed in t steps, then p can be computed in 0(d 3 + d 2 t) steps. 

In our integer setting, we have none of these nice properties. It seems that 
there is no integer counterpart for homogeneous polynomial. Moreover, each 
bit of the computed integers can always be canceled from one to zero. We refer 
the reader to a survey by Landau and Immerman [11 for an analogy between 
polynomial and integer problems. 

2 Tight asymptotic bound for almost all numbers 

In this section, we show that, for computing almost all numbers from 2" to 
2™ +1 , both SLPs and AMCs of size 9(n/logrt) are sufficient and necessary. For 
the proof, we use ideas by Brauer [3] and Erdos [TJ, who showed similar results 
for addition chains. In |6j, Moreira showed similar non-asymptotic bounds for 
SLPs. 

Lemma 3. For all numbers z 6 [2™,2™ +1 ), t(z),t + (z) € 0(n/ \ogn). 

Proof. Let z £ [2 n , 2 n+1 ) be any (n + l)-bit number, and let k is an integer to 
be fixed later. We write n + l = m- k + r where < r < k. 

The idea is to compute m fc-bit numbers Ui, and then concatenate them 
together to get z. We write 

rn 

z = u + 2 r J2 u i ■ (2*) J ' -1 

3=1 

= u + 2 r (wi + 2 k (u 2 + 2 k (. . . (um-i + 2 k u m ) ...) 

Now we just compute all 1,2,3,..., 2 k , taking 2 k — 1 assignments. From 
this, we have 2 r , 2 k and Ui < 2 k , for all i. There are m additions and m 
multiplications in the expansion above. 

Thus, t+(z) < (2 k - 1) + 2m. Choose k — [log n — log log n\ . We get 
t+(z) € 0(n/ logn). 

Since SLPs are just AMCs equipped with subtraction, r(z) < t + (z). Thus, 
t(z) £ 0(n/ log ri) as well. □ 

Lemma 4. AMCs and SLPs of length n can represent at most 2 3nlogn different 
numbers. 
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Proof. We will prove the result for only SLPs, because the proof for AMCs is 
same. 

We count the possiblities for each assignment. For the i th assignment, Oj 
a ji *i a ki, there are at most 3 x i 2 choices, as there are 3 types of operation (2 
types for AMCs) and ji, hi < i. Thus, there are at most Yi7=i = 3"(n!) 2 < 
2 nlog3 . 2 2nlogn < 2 3nlogn com binations, for SLPs of length n. □ 

Theorem 5. For almost all numbers z £ [2 n ,2 n+1 ), t(z),t + (z) £ Q(n/ logn), 
where "almost all" means the fraction of 1 — 2~ c ™, and < e < 1. 

Proof. We only prove this for SLPs again. Let d > 1 be some constant. By 
Lemma [4j SLPs of size at most 3dl " n can represent at most 2 n l d different 
numbers. 

Consider the numbers from 2™ to 2 n+1 — 1. There are 2 n numbers but only 
2 n / d of them can be computed by SLPs of size 3rfl " gn - Let e = 1 — ^. Thus, there 
are 2" - 2 n ' d = 2 n (l - 2~ en ) numbers which need SLPs of size at least " . 

v * 6a log n 

That is, almost all numbers in the range required SLPs of size 0(n/ logn). 

But Lemma [3] states that all numbers in this range can be computed by 
SLPs of size 0{nj logn). This concludes the proof. □ 

Since any number z is in [2",2" +1 ) for some n, we conclude that t + (z) = 
6(t(z)) for almost all z. 

3 Gap of One 

In this section, we study the numbers of the form 2 2 — 1, where n G N. For 
convenience, let N = 2 2 ". We show that r(iV-l) < n+2, but r+(JV-l) > n+3. 

Claim 6. r(JV - 1) < n + 2 

Proof. We first compute a\ ao + ao- So ai = 2. Then we square the current 
result n times to get a n +i = 2 2 = N. Finally, a„+2 a n +i _ 1q, as desired. □ 

We prove the lower bound for t + (N — 1) in 3 steps: 

• There are more than 2 additions in any AMC computing N — 1. 

• There cannot be exactly 3 additions in any AMC computing N — 1 . 

• There are less than 4 additions in any AMC of length at most n + 2 which 
computes N — 1 . 

3.1 More than 2 Additions 

In this subsection, we show that there is no AMC computing N — 1 using only 
2 or less additions. 

When there are few additions in an AMC, we know some facts about the 
values of the registers (ao, aj., . . . , aj) assigned in each step. 
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Fact 7. The registers assigned in an AMC P between the k th and k + 1 th 

additions have values of the form Yli=i a T where a, = Ylj<i °^j + IljXi a j J 
and, for all j , min{/j, /'} = 0. In particular, a\ — 2, and a 2 = 2 C + 1, for some 
c> 0. 

Proof. We prove the statement by induction on k. For the base case, the num- 
bers computed in P before the first addition can be only 1 = Yii=i a t i ■ 

For the inductive step, consider the k th addition assignment a <— b + c, 
where b = rXi-Ti 1 ct?* and c = rij = i a T > by ^ ne induction hypothesis. Thus, a = 
UiZi a i* +nf=i 1 a T ■ We pull the shared factors out and get a — Yl^Z^ a-™ 1 ^ ' c ' ' x 

a>k where a k — Y\!i = i a {' ^Wd^i a {* an dj f° r a ^ *j mm {/i: /<} = 0. Since multi- 
plications can not yield new factors into the sequence, all the numbers computed 
before the k + 1 th addition would be of the form I7»=i a T ■ 

The first factor is a% = 2, because the first addition is 1 + 1. Since we just 
show that a 2 = ct{ x + af 1 where min{/i,/{} = 0, as ot\ = 2, it follows that 
a 2 = 2 C + 1, for some c > 0. □ 

Next, we state two known properties of the number N— 1 and Fermat number 
(cf. [9j). 

Fact 8. N-l = F n -2 = F t where F t = 2 2 ' +1 is the i th Fermat number. 

Fact 9. Fermat numbers are coprime to each other. 

Lemma 10. In an AMC with k additions computing N — 1 = Y\^ =1 a** , we 

have e\ = 0, and e 2 < 1. Moreover, if e 2 — 1, then there is a unique index j 
such that Fj \ a 2 . 

Proof. By Fact a x = 2. But N - 1 is odd, so a = 0. 

As we know a 2 = 2 C + 1, for some c, we now claim that there is a unique 
index j, such that Fj | a 2 . 

There are 2 cases. If c is a power of 2, c = 2 J , then «2 = 2 2J + 1 = Fj. 
Hence, j is a unique index such that Fj \ a 2 by Fact El 

Otherwise, c is not a power of 2, c = 2 J ■ w, for some odd w, then a 2 — 
{2 23 ) w + 1 = {-l) w + 1 = mod Fj. Thus, Fj \ a 2 . For uniqueness, we show 
that for k ^ j, F k \ a 2 . li k < j, then a 2 = {2 2h ) 2i ' Kw + 1 = (-l) 2 ^' 1 " + 1 = 
1 + 1 = 2 mod Fk. If fc > j, then we write w = w' ■ 2 k ~ j +w", where w" < 2 k ~' J . 
We have a 2 = 2 2 ' w + 1 = 2 2 " w ' • 2 23w " + 1 = (±1) • 2 2 ' 1 "" + 1 mod F k . Since 
w" < 2 k -i, so 2 V w " + 1< 2 2 * + 1 = F k . So a 2 = ±2 Vw " + 1^0 mod F k . 

Now, we show that e 2 < 1. Since, Ff \ a e 2 2 \ N - 1 = F i- If e 2 > 1, 

then Fj \ Yltyj Fi ■ But this contradicts the coprimality of Fermat numbers, see 
Fact [S □ 

Theorem 11. If AMC computes N—l, there are strictly more than 2 additions. 

Proof. If there is no addition, then the result is trivially 1. 
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If there is 1 addition, then the result can only be even number, but N — 1 is 
odd. 

If there are 2 additions, N — 1 = a^a^ 2 - By Lemma [TU1 it must be that 
TV — 1 = a>2, and there is only one j, where Fj \ a?. So for k ^ j, \ N — 1, 
which contradicts Fact [S] : N - 1 = F * ■ 1=1 

3.2 Not 3 Additions 

To prove the main statement in this subsection, we need this lemma. 

Lemma 12. Let S — {2 2 °, 2 2 \ 2 22 , . . . } be the sequence of all numbers of the 
form 2 2 \ Let A C Z\{0,±1}, B C Z+\{1} and C C Z+ 6e jfimie sets. 

for any increasing sequence T of the form {cib^ 1 + where ej G Z + and 
ai,bi,Ci € A,B,C respectively, there are infinitely many indices i such that 

Proof. Let a, c be the maximum elements in A and C respectively. 

First, since A is finite and \di\ > 1, so there exists a number t e N such that 
for all <Zj, af > a. We fix such t. 

Again, since A, f? and C are finite and T is increasing , it follows that {e^ji 
is unbounded. So there exists i such that bp > c, a 2 + . Fix this z. 

Consider the sequence B = . . . , i>i+t. |bi}> there are 6j, by € -B such 

that bj — by where i < j < j' , because the size of B is more than \B\. Note 
that t<j'-j<t - \B\. 

Now, we claim that for at least one index k € j'}, we have Sk 7^ 
Suppose not, then we have Ckbp° + = 2 2 for all k <E {i,j,f}- Thus, we get 

{ Cl bp + dif'* = r,i/ j ■ a, (3.1) 
and ( Cj b e / +a j f i '' i = cyb]]' + ay (3.2) 

We will show that by 3 ' > b^ 3 > bp. To prove b^ 3 > bp, if i = j, then it is 
trivial. If i < j, suppose that b &3 < bp. This contradicts Equation ()3.1|) . since 

a i ) 2, ~' > (c.o^+a,) 2 

= cfb^+2a lCl bp +a 2 

The last inequality follows because bp > b &3 , c, a. 

We can prove bjf > o^ 3 in exactly same way using Equation (|3.2p . Now, 
since &j = fry, we have e^/ > 6j. Consider Equation (13. 2p modulo 6^ J . We have 

2 ai does not denote the i th element of A, but it is just some element in A which constitutes 
the i th element of T, Cibp + a^. and Cj have similar meaning. 
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a 2 j ' = dji mod 6j J 

It follows that af 3 — a,/ because b e / > > a 2 * > of \a^. But t 

j j j 1 j j 

is such that a 23 3 > a 2 > a > ay , so we reach a contradiction. Thus, we have 
shown that for all i such that > c, a 2 + , we can find at least one index 
k G {hjij'} where Sk ^ by considering the finite sequence _B. Now, since 
there are infinitely many i satisfying &?* > c, a 2 + , we are done. □ 

Lemma 13. If an AMC computes N—l using exactly 3 additions, then N—l = 
2 dl a d2 + af where d 2 < 1 or d' 2 < 1. 

Proof. By Lemma [TOl A^ — 1 = ol^ol^ where e 2 < 1 • We claim that e3 = I . 

There is at most one j for which Fj \ a 2 . So, for k =/= j, it must be that 
F k | a 3 . We have a^ 3 | JV — 1 = ^=0' Now > if e 3 > then 

Fk I Ili^fc -^ii which contradicts the coprimality of Fermat numbers, see Fact [HI 

We also have e 3 ^ 0, otherwise it must be that N—l = a 2 which is impossible 
as shown in Theorem II 1 1 

By Fact a 3 = af 1 ^ 2 + a^at, 2 , where min{ /,-,//} = 0. So TV — 1 = 

a^ 2 a 3 = a{ 1 al 2+h + ofca£ +fz . Since, min{e 2 + f 2 , e 2 + f 2 } < 1, we have the 
claim by rewriting the variables. □ 

Theorem 14. There is no AMC computing N — l using exactly 3 additions. 

Proof. By Fact [7] and Lemma [TBI N -1 = 2 dl a d2 + af where a 2 = 2 C + 1. 
We will show that, for any value of c,di,d2 and d' 2 , an AMC with 3 additions 
cannot compute N—l. 

First, neither c nor d\ can be zero. If d\ — 0, then 2°a d2 + a 2 2 is even while 
N - 1 is odd. If c = 0, then iV - 1 = 2 dl+d2 + 2 d 'z = 2 k + 1 for some fc, as A^ — 1 
is odd. As in Lemma [TOl if AT — 1 is in this form, then there is only one index j 
such that Fj | AT — 1, and this contradicts the fact that A" — 1 = n"^ 1 ^i- 

Now, there are 4 cases which all will lead to a contradiction : when c, d\ > 2, 
when c > 3, d% = 1, when c = 1, d\ > 3, and some remaining small cases, namely, 

Mi) = (l,l),(2,l)or(l,2). 

We use this following equality in the first two cases, 

d-l d—1 

a d - 1 = (a 2 - 1) Q 2 = 2 C "2- 

i=0 i=0 

Case 1. c, di > 2. 
We have 
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JV-1 = 2 dl ai 2 +af 

N = 2 dl a d 2 2 + (af - 1) + 2 
4-1 

N = 2 dl ai 2 + 2 C "2 + 2. 

i=0 

Since, AT = 2 2 " and c, <2i > 2. the LHS is divisible by 4. but the RHS is not. 
Case 2. c > 3 and di = 1. 

We continue manipulating the equation from the last case, and set d\ = 1. 

4-1 

iV = 2c^ 2 + 2 C ^ a 2 + 2 
4-1 

iV/2 = ^ 2 +2 c - 1 J]a 2 + l 

i=0 

4-1 

N/2 = (a d 2 2 - 1) + 2 C " X ^ a 2 + 2 

i=0 

da-l d 2- 1 

N/2 = 2 C J] a 2 + 2 c - 1 J] a 2 +2. 
»=o »=o 

Since, c > 3, the LHS is divisible by 4, but the RHS is not. 

Case 3. c = 1 and e?i > 3. 
We have a 2 = 3. 

N-l = 2 dl 3 d2 +3 d * 

N = 2 dl 3 d2 + (3 d ' 2 + 1). 

One can check that, for any e, 3 e + 1 is congruent to only 2 or 4 modulo 8. So 
the LHS is divisible by 8, but the RHS is not. 

Case 4. The remaining cases. 

This last case actually consists of many small cases. These are the cases when 
(c, di) = (1, 1), (2, 1) or (1, 2), and we also have that <i 2 < 1 or d' 2 < 1 by Lemma 

EES 

Fortunately, they can be handled simultaneously using Lemma [T2l This lemma 
tells us that, if the computed numbers are of the form {cib^ +ai}i, where a^, bi, Ci 
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are restricted to be from finite sets, and only can be any number, then there 
are infinitely many n, where 2 2 does not occur in the sequence {cib^ + a{\i. 

In this last case, we will show that 2 dl a 2 2 + a 2 2 + 1 is restricted to be of the 
form {cibl* + a,i}i as in the lemma. So there are infinitely many n, where 

2 2 " = N ^ 2 dl a 2 2 + af + 1, which would finish the proof. 

To see this, observe that either d 2 or d' 2 is at most 1, hence only one of d,2 or d! 2 
can be free variable. For example, when d! 2 is not fixed and (c, d\, d 2 ) = (1, 2, 1), 
we have 2 dl a 2 2 + a 2 2 + 1 = 3 d 2 + 13 = N. In this case, a = 1, 6* = 3, and 
di = 13. After we list all possible cases, we have B = {3, 5}, C — {1, 2, 4}, A = 
{2, 3, 4, 5, 6, 7, 11, 13}, which are all finite sets and comply with the conditions 
of the lemma. 

□ 

3.3 Less than 4 Additions 

In this subsection, we show that, if the length of an AMC P is at most n + 2, 
then P cannot compute the large number N — 1 using 4 or more additions. 

The main idea is that, to compute a large number using a short AMC, if 
there are too many additions, then there are not enough squaring steps. Indeed, 
to square the largest number is the fastest way to get a new big number. Hence, 
the final result cannot be as large as the desired number. 

We show the following facts to argue this formally. 

We say that two AMCs P = {{*i,ji,ki)}i and P' = are equal 

(assignment-wise) if (*i,ji,ki) = for all i. We also say P is trans- 

formed into P' or P' is obtained from P, if P is manipulated such that it is 
equal to P' . 

Fact 15. Let P and P' be any AMCs with same numbers of additions and 
multiplications. We can transform P into P' by some sequence of these two 
operations: 

1. Swapping the type of the operations of the i th assignment with (i + l) th 
assignment. That is, *j and *j. 

2. Incrementing /decrementing the index ji or fa of the i th assignment. That 
is, ji <— ji ± 1 or hi <s— hi ± 1 . 

Definition 16. Irredundant AMC. An AMC P is irredundant iff, for every 
i S [0, \P\ — 1], en < a i+ i and at is used as the operand in some assignment. 

Here are easy facts about irredundant AMCs. 

Fact 17. If an AMC Q is redundant, then there exists an irredundant AMC P, 
where c(P) = c(Q) but \P\ < \Q\. 

Fact 18. For any irredundant AMC P, any increase (decrease) of the value of 
the register ai of P always increases (decreases) the computed number c(P). 
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In the followings, we consider only irredundant AMCs because of this fact. 

Fact 19. If there is no irredundant AMC of size at most n + 2 which computes 
N — 1 using 4 or more additions, then neither is the redundant one. 

Proof. We prove the contra-positive. Suppose that Q is a redundant AMC of 
size at most n + 2 which computes N — 1 using 4 or more additions. Then there 
is an AMC P, where c(P) = c(Q) = N - 1 but \P\ < \Q\ < n + 2 by Fact ED 
There are also at least 4 additions in P, otherwise this contradicts Theorem [TT] 
or[H □ 

Fact 20. Let P be any irredundant AMC, and let P be obtained from P by 
incrementing some index ji or ki. We have c(P) < c{P). 

Proof. As P is irredundant, aj i < a^+i and < dfej+i- Hence, would be 
increased. Then this fact follows immediately from Fact [18J □ 

We say that the AMC P has maximum indices if j$ = ki = i — 1, for all i. 
That is, every register depends on only the previous one. Note that AMCs with 
maximum indices are irredundant. 

Fact 21. Let P be any AMC with maximum indices, and let P be obtained from 
P by swapping the operation *j = x with — +. We have c{P) < c(P). 

Proof. For every i, let hi be the i th register of P. Since P and P have maximum 
indices, every register depends on only the previous one. It suffices to show that 

O-i+l < fii+l- 

We have a^+i = 2a^ = 2a|_ 1 and aj+i — af — (2S,_i) 2 = (2ai_i) 2 . Hence, 
aj+i < Sj+i as desired. □ 

Lemma 22. The maximum number that irredundant AMCs with a additions 
and m multiplications can compute is 2 a ' 2 . 

Proof. Consider an AMC P* with maximum indices and the first a assign- 
ments are additions, followed by m multiplications. Actually, these additions 
are doubling and multiplications are squaring as P* has maximum indices. Thus, 
c{P) = {2 a f m . 

We claim that, for any other irredundant AMC P with a additions and m 
multiplications, c(P) < c(P*). If P does not have not maximum indices, then 
c(P) < c(P*) by Fact [20l If P has maximum indices but P is not equal to P*, 
then there exists an index i where (*t,*<+i) = (x,+). Hence, c(P) < c(P*) by 
Fact [HU So P* is the irredundant AMC with a additions and m multiplications 
which computes the biggest possible number. □ 

Lemma 23. The second largest number that irredundant AMCs with a additions 
and m multiplications can compute is 2 e where e — max{log3 • (a ~ 2) • 2 m , 3a • 
2 m - 2 ,(2a-l)-2" 1 - 1 }. 
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Proof. Consider P* denned in the last lemma. We claim that, any irredundant 
AMC P computing the second largest number can be transformed into P* in 
one manipulation. 

Suppose that we need at least 2 manipulations to transform P into P* . Since 
P* has maximum indices, the manipulation contains no index decrement. Since 
two kinds of manipulation do not depend on each other, we assume that we 
always increment the indices and then swap the types of operations. 

There are 2 cases. First, we need to increment index. After the first incre- 
ment, we have P which is not P* yet. We have c(P) < c(P) < c(P*) by Fact 1201 
and Lemma [2"2l Second, we don't need to increment index, so P has maximum 
indices. After we swap the types of operations, we get P which is not P* yet. 
We again have c(P) < c{P) < c(P*) by Fact [2"T1 and Lemma |2"21 In both cases, 
P computes at most the third largest number. 

Now, having that we can get P* from P in one manipulation, we can get P 
from P* in one manipulation as well. There are many ways to manipulate P* 
to get P in one step. But it turns out that there are only 3 possible values of 
c(P). 

First, we decrement one index of the addition assignment in P*. So there 
is the assignment a, <— aj_i + cij— 2 in P ■ The value of the register at the last 
addition is 2 a_i (2^ 1 + 2 4 " 2 ) = 2 a ~ 2 • 3. Note that this does not depend on i. 
Then we square for m times, and get c{P) = (2 a ~ 2 • 3) 2 " = 2 lo s 3 ( a - 2 )- 2m . 

Second, we decrement one index of the multiplication assignment in P* . 
Hence, there is the assignment a a +i <— a a +i_i x a a +i-2 in P- Similarly, we have 
c(P) = (2 a - 2,_1 x 2 a - 2 ^ 2 f m ^ = 2 a32m ' 2 . 

Third, we swap the last addition with the first multiplication in P* . We 
have c(P) = ((2 - 1 ) 2 • 2) 2 ™" 1 = 2 ( 2Q - 1 )- 2m_1 . 

The second largest number is the maximum among these results. □ 

Now, we are ready for the main statement. 

Theorem 24. If AMC computing N — 1 has size at most n + 2, there are less 
than 4 additions. 

Proof. Let a be number of additions. If a > 5, then the biggest possible number 
is 2 a 2 < 2 2 <2 Z — 2 2 < N - 1, for large enough n. 

If a — 4, then the maximum number is 2 2< )+ E — N > N —1. Also, the 
second largest number is 2 e where e = max{log 3(4 - 2) • 2"~ 2 , 3 • 4 • 2™~ 4 , (2 • 4 - 
1) • 2"- 3 } = (2 • 4 - 1) • 2"~ 3 = 2 n - 3+1 °s 7 . We can see that 2 2 "~ 3+1 ° k7 < N - 1, 
for large enough n. □ 

We have shown that any AMC P computing N — 1 must use strictly more 
than 3 additions by Theorem [TT1 and [T4l but if P has size at most n + 2, then 
must be less than 4 additions as well. So t+(N — 1) > n + 3. As t(N— 1) < n + 2 
by Claim [6l we conclude that subtraction helps us compute N — 1 strictly faster 
by at least one step. 
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4 Conclusion 



We have shown that, for almost all numbers n, r + (n) = 9(r(n)). We still 
suspect that there are hard instances n showing that SLPs compute some num- 
bers super-polynomially faster than AMCs, r+(n) ^ r(n)°( 1 \ In this paper, we 
demonstrate the power of subtraction by showing only that t+(N — 1) — t(N — 
1) > 1, where N = 2 2 " and n e N. 

However, note that N — 1 is not such hard instance because t + (N — 1) < In. 
This can be shown using the facts that N — 1 = F n — 2 and, for alii, F; — 2 = 

X - 2). 

It remains as an open problem to decide whether there exists n such that 
T+(n) £ T(n) ^ . The next step towards this problem is to find n such that 
T + (n) — r(n) = f(n) where / is some increasing function. 
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